← Back to CVE List
Vulnerability Intelligence Report
.NET Framework Information Disclosure Vulnerability

CVE-2024-29059

.NET Framework Information Disclosure Vulnerability

CISA KEV Nuclei Template SSVC: Active Exploitation Automatable
CVSS Base Score
7.5
HIGH
Exploitability:3.9
Impact Score:3.6
EPSS Probability:98.83%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Weaknesses (CWE)

CWE-209 ↗CWE-209: Generation of Error Message Containing Sensitive Information

Affected Products & Versions

Vendor Product Affected Versions
Microsoft Microsoft .NET Framework 4.8 4.8.0 < 4.8.04690.02 (affected)
Microsoft Microsoft .NET Framework 3.5 AND 4.8 4.8.0 < 4.8.04690.02 (affected)
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 < 4.7.04081.03 (affected)
Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.0 < 4.7.04081.03 (affected)
Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 4.8.1 < 4.8.09214.01 (affected)
Microsoft Microsoft .NET Framework 4.6.2 4.7.0 < 4.7.04081.03 (affected)
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.2 10.0.0 < 10.0.10240.20402 (affected)
Microsoft Microsoft .NET Framework 2.0 Service Pack 2 2.0.0 < 3.0.50727.8976 (affected)
Microsoft Microsoft .NET Framework 3.0 Service Pack 2 3.0.0 < 3.0.50727.8976 (affected)
Microsoft Microsoft .NET Framework 3.5 3.5.0 < 3.0.50727.8976 (affected)
Microsoft Microsoft .NET Framework 3.5.1 3.5.0 < 3.0.30729.8959 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
98.832%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMicrosoft Corporation · Vendor · USA
Reserved2024-03-14T23:05:27
Published2024-03-22T23:09:05
Patch Date2024-03-22
Last Updated2025-10-21T23:05:22

LINK COPIED TO CLIPBOARD